CVE-2024-21775

Published: Feb 16, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting feature.

Products: Zohocorp: Manageengine Exchange Reporter Plus

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Zohocorp Manageengine Exchange Reporter Plus	Before 5.7
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5700
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5701
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5702
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5703
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5704
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5705
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5706
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5707
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5708
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5709
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5710
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5711
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5712
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5713
Zohocorp Manageengine Exchange Reporter Plus	Version 5.7 5714

Source: 0fc0942c-577d-436f-ae8e-945763c79b02

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

No history available yet.